Abstract of the disclosure 

A system of security information processed such that 
it can be understood by a person with insufficient 
knowledge about security technologies is provided. 
The system comprises a vulnerability information storing 
unit for storing at least threat level values of 
vulnerabilities of a computer system to be monitored; a 
vulnerability information offering unit to extract 
vulnerability information to be applied to said computer 
system from said vulnerability information storing unit 
based on the configuration information of the computer 
system, and to associate the vulnerability information 
with this computer system; a vulnerability modification 
information storing unit for storing the information on 
whether or not a system manager has applied modification 
work based on this vulnerability information; and a 
security level computing unit for computing, regarding a 
specific equipment, a security level regarding a 
vulnerability of said equipment from a type of this 
equipment, the threat level value of the vulnerability 
that has not been modified with regarding this equipment, 
and the number or days while the vulnerability has been 
left without any modification taken. 
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